| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 3.1.19-rc1, < 3.1.20≥ 3.2.4-rc1, < 3.2.5≥ 3.3.2-rc1, < 3.3.3≥ 3.4.0-rc1, < 3.4.1 | 3.1.203.2.53.3.33.4.1 |
If remember me is on and users log in with the box checked, if the developer then disabled "remember me" function, any pre-existing cookies will continue to authenticate users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free